From 118179f32ad4e18e166daf2f4f612a79d1558b80 Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Tue, 20 Sep 2022 23:25:24 +0100 Subject: [PATCH] frr: add patch for CVE-2022-37032 --- pkgs/servers/frr/default.nix | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/pkgs/servers/frr/default.nix b/pkgs/servers/frr/default.nix index c23e956972c2..1215fbd34094 100644 --- a/pkgs/servers/frr/default.nix +++ b/pkgs/servers/frr/default.nix @@ -1,6 +1,7 @@ { lib , stdenv , fetchFromGitHub +, fetchpatch # build time , autoreconfHook @@ -41,6 +42,14 @@ stdenv.mkDerivation rec { hash = "sha256-+M4xTdjCp5TJh0U8ZfUmw84Y7O0TZ9mmUXhh2J/QOE0="; }; + patches = [ + (fetchpatch { + name = "CVE-2022-37032.patch"; + url = "https://github.com/FRRouting/frr/commit/ff6db1027f8f36df657ff2e5ea167773752537ed.patch"; + sha256 = "sha256-b3nT6xco620hMSqlj/nTWTJCegf3ARAGaQbii4Yq6Ag="; + }) + ]; + nativeBuildInputs = [ autoreconfHook bison